GHSA-wxr3-2hgv-qm8fHighCVSS 8.3

node-twain vulnerable to Improper Check or Handling of Exceptional Conditions

Published
July 10, 2024
Last Modified
August 9, 2024

🔗 CVE IDs covered (1)

📋 Description

All versions of the package node-twain are vulnerable to Improper Check or Handling of Exceptional Conditions due to the length of the source data not being checked. Creating a new twain.TwainSDK with a productName or productFamily, manufacturer, version.info property of length >= 34 chars leads to a buffer overflow vulnerability.

🎯 Affected products1

  • npm/node-twain:<= 0.0.16

🔗 References (4)